kepr / 5fb18b61c2d9

per-repo private gate: private BIGINT on repos, requireRepoReadable + viewerMayReadPrivate chokepoint on all ~70 repo-scoped handlers, getPublicRepos/encodeInstance filter private=0, conformance test asserts 404-for-private-as-anon, remove redundant serverRepoExists after gate (v1.56.124)

dev · 3 weeks ago · 2026-06-19 · 14.6 MB

session: security foundation · agent: claude-sonnet-4-6

parent: 0cd296fa79ca